Cannot block email

[Abdelrahman]

Hey Guys,

How can I block this email?

Jun 9 09:54:25 pmg postfix/qmgr[18254]: 7AB8B20B22: from=<annette@asrllc.cpa>, size=1487, nrcpt=1 (queue active)
Jun 9 09:54:55 pmg postfix/smtp[31367]: 7AB8B20B22: to=<annettecana@icloud.om>, relay=none, delay=256740, delays=256710/0.08/30/0, dsn=4.4.1, status=deferred (connect to icloud.om[17.253.142.4]:25: Connection timed out)
Jun 9 11:02:27 pmg postfix/qmgr[31850]: 7AB8B20B22: from=<annette@asrllc.cpa>, size=1487, nrcpt=1 (queue active)
Jun 9 11:02:57 pmg postfix/smtp[32710]: 7AB8B20B22: to=<annettecana@icloud.om>, relay=none, delay=260822, delays=260792/0/30/0, dsn=4.4.1, status=deferred (connect to icloud.om[17.253.142.4]:25: Connection timed out)

I tried Match filed as u can see in the screenshot but none of them works, but If I send a manual message from the server it works!!

 

[Stoiko Ivanov]

Please post the complete logs of these mails since this snippet only makes it seem as if the mails are deferal notices/bounces originating in PMG (check that with `mailq`)

 

[Abdelrahman]

Please post the complete logs of these mails since this snippet only makes it seem as if the mails are deferal notices/bounces originating in PMG (check that with `mailq`)

root@pmg:~# mailq
-Queue ID-  --Size-- ----Arrival Time---- -Sender/Recipient-------
1BC4420CD1      263 Wed Jun  9 12:16:33  root@pmg.encirca.com
                 (connect to icloud.om[17.253.142.4]:25: Connection timed out)
                                         annettecana@icloud.om

Is this what u mean? it's already mentioned above, here's also a screenshot from Tracking Center, Thanks for your fast reply!

 

[Stoiko Ivanov]

Is this what u mean?

yes - although 1BC4420CD1 is a different mail from 7AB8B20B22 - but maybe they are related/have the same origin - you can view the queued mail on the commandline:

find /var/spool/postfix -iname '*7AB8B20B22*'
find /var/spool/postfix -iname '*1BC4420CD1*'

should print the path of where the queued mail is stored - you should be able to see it by opening it in a text-viewer (e.g. less)

My guess is that somebody mistyped the e-mail address somewhere (maybe in the PMG configuration) (icloud.om vs. icloud.com)

 

[Abdelrahman]

yes - although 1BC4420CD1 is a different mail from 7AB8B20B22 - but maybe they are related/have the same origin - you can view the queued mail on the commandline:

find /var/spool/postfix -iname '*7AB8B20B22*'
find /var/spool/postfix -iname '*1BC4420CD1*'

should print the path of where the queued mail is stored - you should be able to see it by opening it in a text-viewer (e.g. less)

My guess is that somebody mistyped the e-mail address somewhere (maybe in the PMG configuration) (icloud.om vs. icloud.com)

Yes, I know about the misspelling, my problem is, I cannot block this email for some reason, as I mentioned above in the screenshots

root@pmg:~# cat /var/spool/postfix/defer/7/7AB8B20B22

<annettecana@icloud.om>: connect to icloud.om[17.253.142.4]:25: Connection timed out
recipient=annettecana@icloud.om
offset=707
dsn_orig_rcpt=rfc822;annettecana@icloud.om
status=4.4.1
action=delayed
reason=connect to icloud.om[17.253.142.4]:25: Connection timed out

 

[hata_ph]

Show your what action rules and also the full mail in raw format.

 

[Stoiko Ivanov]

Yes, I know about the misspelling, my problem is, I cannot block this email for some reason, as I mentioned above in the screenshots

This mail is a defer warning - PMG generates this and sends it to the original sender to inform them that a mail is not delivered yet.
Mails generated by PMG are not run through the pmg-smtp-filter - thus you cannot block them in the GUI.

You can get rid of the mail by deleting it from the queue with `postsuper -d <queueid>` (see `man postsuper`)

If you want to find out where this mail originally came from you need to check the journal and mail.logs for all occurences of `annettecana@icloud.om`